Re: AW: [dss-x] A question to the forum

["Andreas Kuehne" <kuehne@trustable.de>]

Hmm, I would recommend to just leave it to the server ...
There may be tricky cross dependencies if you provide ready-made digest with a different algorithm. Whta if this is different from the one denoted to be used ?
And what should the digest algorithm apply for ? For the document hashing or the signature internal hash ? 
Should it be a hint or an advice ? What type of error should be returned in case of an incompatibility ?

Greetings

Andreas

----- original Nachricht --------

Betreff: AW: [dss-x] A question to the forum
Gesendet: Mo, 07. Feb 2011
Von: Dr. Detlef H�hnlein

Hallo Ezer,
 
in my point of view the explicit specification of the hash algorithm to 
be used for the signature generation is very similar to the explicit selection of 
a specific key (and hence implicitely signature algorithm + hash algorithm), 
if there are multiple options available. Therefore I would propose to use the 
KeySelector-structure (section 3.5.4 of the Core) and simply define structures, 
which may appear in the Other-element. 
 
What do think about this approach?
 
BR,
 Detlef 
 
 
Von: Ezer Farhi [mailto:Ezer@arx.com] 
Gesendet: Sonntag, 6. Februar 2011 11:03
An: dss-x@lists.oasis-open.org
Betreff: [dss-x] A question to the forum
 
Hi,
 
I went over the DSS-core and could not find a way to direct the server to use a certain hash mechanism when performing a CMS signature or XML signature on a given document.
(When a hash is given it is possible to use the DigestMethod or the relevant given hash).
Did anyone bump into such a request?
 
Thanks,
Ezer

 


--- original Nachricht Ende ----